diff --git a/docker/Dockerfile b/docker/Dockerfile
index 29f2ee7f..af94bc8f 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -47,7 +47,7 @@ RUN --mount=type=cache,id=turbo-cache,target=/app/.turbo \
 # on Apple Silicon when cross-compiling for linux/amd64.
 # caire imports gioui.org/app which requires CGO on Linux, so we use a
 # proper C cross-compiler instead of CGO_ENABLED=0.
-FROM --platform=$BUILDPLATFORM golang:1.23-bookworm@sha256:167053a2bb901972bf2c1611f8f52c44d5fe7e762e5cab213708d82c421614db AS caire-builder
+FROM --platform=$BUILDPLATFORM golang:1.24-bookworm@sha256:1a6d4452c65dea36aac2e2d606b01b4a029ec90cc1ae53890540ce6173ea77ac AS caire-builder
 
 ARG TARGETOS=linux
 ARG TARGETARCH
@@ -239,7 +239,7 @@ RUN --mount=type=cache,target=/root/.cache/pip \
     /opt/venv/bin/pip install --upgrade "pip==25.1.1" && \
     /opt/venv/bin/pip install wheel setuptools && \
     /opt/venv/bin/pip install \
-        Pillow==11.1.0 \
+        Pillow==12.1.1 \
         numpy==1.26.4 \
         opencv-python-headless==4.10.0.84